CVE-2019-5016
An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory read, resulting in a denial of service or remote information disclosure. An unauthenticated attacker can send a crafted packet on the local network to trigger this vulnerability.
Published:Jun 17, 2019
Last Modified:Nov 21, 2024
EPS:Jun 17, 2019
EPSS Score:0.00918
CVSS Score:9.1
Affected Products
Vendor
Product
Action
Vendor
Kcodes
Product
Netusb.ko
Kcodes
Netusb.ko
Vendor
Netgear
Product
R7900
Netgear
R7900
Vendor
Netgear
Product
R7900 Firmware
Netgear
R7900 Firmware
Vendor
Netgear
Product
R8000
Netgear
R8000
Vendor
Netgear
Product
R8000 Firmware
Netgear
R8000 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
